fix(consumer): add maxLength and pattern validations for KongConsumer and KongConsumerGroup (#3109)

Author: sandromodarelli

CHANGELOG.md

@@ -64,6 +64,8 @@
 
 - Fix validation logic for dataplane ports in admission policy.
   [#3031](https://github.com/Kong/kong-operator/pull/3031)
+- Add maxLength and pattern validations for `KongConsumer` and `KongConsumerGroup` fields.
+  [#3109](https://github.com/Kong/kong-operator/pull/3109)
 - Gateway: Sort Gateway/DataPlane status addresses deterministically with hostname-first priority.
   [#3110](https://github.com/Kong/kong-operator/pull/3110)
 - HybridGateway: Fixed the logic of translating `HTTPRoute` path matches to

api/configuration/v1/kongconsumer_types.go

@@ -44,10 +44,14 @@ type KongConsumer struct {
 	metav1.ObjectMeta `json:"metadata,omitempty"`
 
 	// Username is a Kong cluster-unique username of the consumer.
+	// +kubebuilder:validation:MaxLength=128
+	// +kubebuilder:validation:Pattern=`^[\p{L}\p{N}.\-_~+@/\[\]]*(?: [\p{L}\p{N}.\-_~+@/\[\]]+)*$`
 	Username string `json:"username,omitempty"`
 
 	// CustomID is a Kong cluster-unique existing ID for the consumer - useful for mapping
 	// Kong with users in your existing database.
+	// +kubebuilder:validation:MaxLength=128
+	// +kubebuilder:validation:Pattern=`^[0-9a-zA-Z.\-_~\(\)#%@|+\[\]]*(?: [0-9a-zA-Z.\-_~\(\)#%@|+\[\]]+)*$`
 	CustomID string `json:"custom_id,omitempty"`
 
 	// Credentials are references to secrets containing a credential to be

api/configuration/v1beta1/kongconsumergroup_types.go

@@ -53,6 +53,8 @@ type KongConsumerGroup struct {
 // +kubebuilder:validation:XValidation:rule="(has(oldSelf.adopt) && has(self.adopt)) || (!has(oldSelf.adopt) && !has(self.adopt))", message="Cannot set or unset spec.adopt in updates"
 type KongConsumerGroupSpec struct {
 	// Name is the name of the ConsumerGroup in Kong.
+	// +kubebuilder:validation:MaxLength=128
+	// +kubebuilder:validation:Pattern=`^[\p{N}\p{L}.\-_~]*$`
 	Name string `json:"name,omitempty"`
 
 	// ControlPlaneRef is a reference to a ControlPlane this ConsumerGroup is associated with.

charts/kong-operator/charts/ko-crds/templates/ko-crds.yaml

@@ -50337,6 +50337,8 @@ spec:
                   rule: '!has(self.type) ? !has(self.konnectNamespacedRef) : true'
               name:
                 description: Name is the name of the ConsumerGroup in Kong.
+                maxLength: 128
+                pattern: ^[\p{N}\p{L}.\-_~]*$
                 type: string
               tags:
                 description: Tags is an optional set of tags applied to the ConsumerGroup.
@@ -50534,6 +50536,8 @@ spec:
             description: |-
               CustomID is a Kong cluster-unique existing ID for the consumer - useful for mapping
               Kong with users in your existing database.
+            maxLength: 128
+            pattern: '^[0-9a-zA-Z.\-_~\(\)#%@|+\[\]]*(?: [0-9a-zA-Z.\-_~\(\)#%@|+\[\]]+)*$'
             type: string
           kind:
             description: |-
@@ -50784,6 +50788,8 @@ spec:
             type: object
           username:
             description: Username is a Kong cluster-unique username of the consumer.
+            maxLength: 128
+            pattern: '^[\p{L}\p{N}.\-_~+@/\[\]]*(?: [\p{L}\p{N}.\-_~+@/\[\]]+)*$'
             type: string
         type: object
         x-kubernetes-validations: